Closed Bug 1032593 Opened 11 years ago Closed 7 years ago

Airplane mode can be turned on by long pressing the power button

Categories

(Firefox OS Graveyard :: FindMyDevice, defect)

ARM
Gonk (Firefox OS)
defect
Not set
normal

Tracking

(tracking-b2g:backlog, b2g-v2.0 affected)

RESOLVED WONTFIX
tracking-b2g backlog
Tracking Status
b2g-v2.0 --- affected

People

(Reporter: jlorenzo, Unassigned)

Details

STR 1. Lock the device via FMD 2. On the device, long press the lock screen button 3. Tap "Turn on Airplane mode" Expected result I guess we should avoid displaying the menu containing "Turn on Airplane mode", "Reboot" or "Power off". Actual result As a robber, I have now a running device without being annoyed by the actions made by the actual owner.
QA Contact: kglazko
We need to figure out if this is the same as bug 1030448.
This is reproducible on the Lost Mode even after locking/relocking/restarting the device. This doesn't appear to be an issue with the "fake lock screen", but with the real lost mode lock screen.
Blocking on this because this allows a malicious user to disable tracking of the device via shutting off the data connection.
blocking-b2g: 2.0? → 2.0+
Assignee: nobody → ggoncalves
Target Milestone: --- → 2.0 S6 (18july)
FWIW android has the same behavior and when you put the android device on airplane mode, sure enough "Ring" did not work.
Summary: Airplane mode can be turned on by long pressing the Lock button → Airplane mode can be turned on by long pressing the power button
After discussing this with Tony et al on IRC, the recommendation is to not block on this issue for 2.0. For the following reasons 1. The interaction between FMD and the power/airplane mode/data connection while in lost mode requires further definition. 2. The attack vector of closing data connections is possible even if we disable the airplane mode. The malicious user can always remove the battery or power off the device
blocking-b2g: 2.0+ → ---
Target Milestone: 2.0 S6 (18july) → ---
blocking-b2g: --- → backlog
Assignee: ggoncalves → nobody
blocking-b2g: backlog → ---
Firefox OS is not being worked on
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.